NOBELIUM targeting delegated administrative privileges to facilitate broader attacks

microsoft.com · 25 Oct 2021 · Licence: not cleared; local research copy only

CVEs this report names

1 CVE

CVE-2022-38028Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft · WindowsKEVHigh · 7.8T1068Exploitation for Privilege Escalation2 reports
14.9%Top 3.3%
68.9priority

Analyzing Forest Blizzard’s custom post-compromise tool for exploiting CVE-2022-38028 to obtain credentials

Analyzing Forest Blizzard’s custom post-compromise tool for exploiting CVE-2022-38028 to obtain credentials

None

No passage in this report has been tied to an ATT&CK technique.